privacy policy california

CALIFORNIA PRIVACY NOTICE

This California Privacy Notice is incorporated into our Privacy Policy by reference. To view these terms, please see our Privacy Policy.

The California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act of 2020, provides you with specific rights regarding your personal information. This section describes the rights that California consumers have and explains how to exercise those rights. For the purposes of this section, personal information does not include: (i) information that is lawfully made available from federal, state or local government records; (ii) de-identified or aggregated data; or (iii) information excluded from the scope of the CCPA. To be clear, these rights are granted only to the extent that you are a California consumer and we are acting as a “business” under the CCPA with respect to your personal information. The rights in this section are not intended to grant you additional rights, but only your rights under the CCPA.

Information We Collect; How We Collect It; How We Use It

To the extent that our collection, use, and disclosure of personal information is addressed by a separate privacy notice (e.g., for our Supplier Portal or Love ISDIN Program), please consult the terms of that privacy notice for detailed information about our data practices, including the categories of personal information that we collect and disclose. For all other consumers, general information regarding our collection, use, and disclosure of personal information is set forth in the Privacy Policy, and more detailed information about our data practices in relation to specific categories of personal information can be found in the Personal Information Processing Chart.

Sharing of Personal Information

We may disclose your personal information to service providers for a business purpose, or sell or share your personal information to third parties, subject to your right to opt out (see Right to Opt Out of Selling or Sharing Your Personal Information, below). The information under the Personal Information Processing Chart (or as addressed under a separate privacy notice, if applicable) describes the entities with which we may disclose your personal information.

Rights to Your Information

Right to Know

As a California consumer, you have the right to request that we disclose certain information to you about our collection, use, or disclosure of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (see Exercising Your Rights below), and subject to certain limitations that we describe below, we will disclose such information. You have the right to request any or all of the following:

The categories of personal information we collected about you.

The categories of sources from which the personal information is collected.

Our business or commercial purpose for collecting, selling, or sharing that personal information.

The categories of third parties with whom we disclose personal information.

The specific pieces of personal information we collected about you (see Data Portability Rights below).

Right to Delete

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Your Rights below), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. However, we may retain personal information that has been de-identified or aggregated. Furthermore, we may deny your deletion request if retaining the information is necessary for us or our service provider(s) in order to perform certain actions set forth under the CCPA, such as detecting security incidents and protecting against fraudulent or illegal activity.

Right to Data Portability

You have the right to request a copy of personal information we have collected and maintained about you. The CCPA allows you to request your information from us up to twice during a 12-month period. We will provide our response in a readily usable (and usually electronic) format.

Right to Correct

You have the right to request the correction of any personal information we maintain about you.

Right to Opt Out of Selling or Sharing Your Personal Information

You have the right to opt out of the sale or sharing of your personal information, along with the right to opt in to the sale of such information. We do not sell or share the personal information of consumers we actually know are less than 16 years of age, unless we receive affirmative authorization (the "right to opt-in") from either the consumer who is less than 16 (but greater than 13) years of age, or the parent or guardian of a consumer less than 13 years of age. To our knowledge, we do not sell or share the personal information of minors under 16 years of age.

To exercise the right to opt out, you (or your authorized representative) may submit a request to us by may submit a request to us by contacting us at privacy.us@isdin.com, or by visiting the following Internet Web page: "Do Not Sell or Share My Personal Information". We will also treat opt-out preference signals as valid opt-out requests.

You may change your mind and opt back in to personal information sales at any time by contacting us at privacy.us@isdin.com.

Right to Limit the Use of Your Sensitive Personal Information

Although the CCPA provides you with the right to limit the use or disclosure of your sensitive personal information (“SPI”) if we are using your SPI beyond what is reasonable and proportionate to provide the requested goods or services, we have not collected SPI within the past 12 months and, as of the date of this Privacy Policy, have no plans to do so.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights, including but not limited to, by:

Denying you goods or services.

Charging you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.

Providing you a different level or quality of goods or services.

Suggesting that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Exercising Your Rights

To exercise the rights described above, please contact us by using the following methods:

Calling us at +1 862-242-8129.

Emailing us at privacy.us@isdin.com

Visiting our California Rights page by clicking here

After submitting a request, we will take steps to verify your identity in order for us to properly respond and confirm that it is not a fraudulent request. In order to verify your identity, we will ask, at a minimum, that you provide your name, email address, phone number, address, and relationship to us, so that we can seek to match this information with the information existing in our systems. When providing us this information, you represent and affirm that all information provided is true and accurate. If we are unable to verify that the consumer submitting the request is the same individual about whom we have collected personal information, we may contact you for more information, or we may not be able to meet your request.

Only you, or an agent legally authorized to act on your behalf, may make a verifiable request related to your personal information. If you are making a request as the authorized agent of a California consumer, we will ask you also submit reliable proof that you have been authorized in writing by the consumer to act on such consumer’s behalf.

We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, the CCPA allows us up to 90 days to respond. We will still contact you within 45 days from when you contacted us to let you know we need more time to respond.

Financial Incentives

We may offer you financial incentives, including discounts, coupons, gift cards or other rewards, for sharing personal information through programs that we may provide from time to time. For example, we may offer you free ISDIN products or discount codes for your participation in telephone or online surveys, for making reviews on our products, as part of invitations to events, or in relation to other offers.

When we offer financial incentives to you, we believe that the value of the different pricing or services you will receive exceeds the cost of providing your personal information. Your participation in these programs is completely optional and subject to the terms provided to you at the time you sign up. You can opt-out of such program at any time by contacting us at privacy.us@isdin.com.

For financial incentive disclosures relating specifically to our Love ISDIN program, please see the section of our Privacy Policy titled Love ISDIN Loyalty Program.

California “Shine the Light”

Under California Civil Code Section 1798.83 (“Shine the Light”), Under California Law, California residents have the right to request in writing from businesses with whom they have an established business relationship, (a) a list of the categories of personal information, such as name, email address and mailing address and the type of services provided to the customer that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes and (b) the names and addresses of all such third parties. To request the above information, please contact us by privacy.us@isdin.com If you do not want your personally identifying information shared with any third party who may use such information for direct marketing purposes, then you may opt out of such disclosures by sending us an email at privacy.us@isdin.com.

PERSONAL INFORMATION PROCESSING CHART

In the past 12 months, we have collected the following categories of personal information from the sources described in the section of the Privacy Policy titled How We Collect Your Personal Information. The chart below describes our business or commercial purposes for collecting and disclosing these categories personal information, the parties we have disclosed such information to, and whether we have sold or shared (or otherwise disclosed for targeted advertising) each category of personal information. Depending on your level of interaction with us, we may not have collected your personal information from all of the categories listed below. The categories of personal information described below are retained and stored for as long as is necessary to effectuate the business and commercial purposes for which they have been collected, and otherwise as described in the section of the Privacy Policy titled Data Retention.

Category of data: Personal Identifiers
Examples	A real name, postal address, online identifier, Internet Protocol address, email address, account name.
Business or Commercial Purposes for Collecting Personal Information	To communicate with you. This may include: contacting you about and providing you and our clients with our Service; enabling our website chat function; responding to your direct inquiries, requests, issues or feedback, and providing customer service; and adding you to our mailing lists and sending you emails from time to time. To provide our products and services. This may include: operating the Service, and providing you with any specific services that you have requested; creating, maintaining, and otherwise managing your account, profile, or subscription; delivering content and product and service offerings relevant to your interests; fulfilling your orders and/or completing the transactions you have requested, processing your payments, and providing you receipts and order updates; to remind you of items you have left in your cart; and providing a forum for discussion, asking questions, posting photos and reviews, and sharing experiences. Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors. Providing personalized advertising and marketing services. For analytics and personalisation For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing analytic services, providing storage, or providing similar services. For security and fraud prevention. This may include: helping maintain the safety, security, and integrity of our Service, databases and other technology assets, and business; internal research; technological development and demonstration; and improving, upgrading, or enhancing our Service; detecting security incidents; protecting against malicious, deceptive, fraudulent, or illegal activity; and prosecuting those responsible for that activity; and investigating suspected fraud, harassment, or other violations of any law, rule, or regulation, or the policies for our Service. To comply with legal obligations. This may include: compliance with legal or regulatory obligations, establishing or exercising our rights, and defending against a legal claim; responding to law enforcement requests and as required by applicable law, court order, legal process, or governmental regulation.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes	To communicate with you. This may include: contacting you about and providing you and our clients with our Service; enabling our website chat function; responding to your direct inquiries, requests, issues or feedback, and providing customer service; and adding you to our mailing lists and sending you emails from time to time. To provide our products and services. This may include: operating the Service, and providing you with any specific services that you have requested; creating, maintaining, and otherwise managing your account, profile, or subscription; delivering content and product and service offerings relevant to your interests; fulfilling your orders and/or completing the transactions you have requested, processing your payments, and providing you receipts and order updates; to remind you of items you have left in your cart; and providing a forum for discussion, asking questions, posting photos and reviews, and sharing experiences. Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors. Providing personalized advertising and marketing services. For analytics and personalisation For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing analytic services, providing storage, or providing similar services. To comply with legal obligations. This may include: compliance with legal or regulatory obligations, establishing or exercising our rights, and to defending against a legal claim; responding to law enforcement requests and as required by applicable law, court order, legal process, or governmental regulation.
“Sold” or “Shared” in the Prior Twelve (12) Months for the Following Purposes	Marketing and advertising. For analytics and personalisation
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information	Service providers who perform business services for us. Marketing and advertising partners.

Category of data: Personal information covered by the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
Examples	A name, physical characteristics or description, address, telephone number, credit card number, debit card number, or any other financial information.
Business or Commercial Purposes for Collecting Personal Information	To communicate with you. This may include: contacting you about and providing you and our clients with our Service; enabling our website chat function; responding to your direct inquiries, requests, issues or feedback, and providing customer service; and adding you to our mailing lists and sending you emails from time to time. To provide our products and services. This may include: operating the Service, and providing you with any specific services that you have requested; creating, maintaining, and otherwise managing your account, profile, or subscription; delivering content and product and service offerings relevant to your interests; fulfilling your orders and/or completing the transactions you have requested, processing your payments, and providing you receipts and order updates; to remind you of items you have left in your cart; and providing a forum for discussion, asking questions, posting photos and reviews, and sharing experiences. Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors. Providing personalized advertising and marketing services. For analytics and personalization For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing analytic services, providing storage, or providing similar services. For security and fraud prevention. This may include: helping maintain the safety, security, and integrity of our Service, databases and other technology assets, and business; internal research; technological development and demonstration; and improving, upgrading, or enhancing our Service; detecting security incidents; protecting against malicious, deceptive, fraudulent, or illegal activity; and prosecuting those responsible for that activity; and investigating suspected fraud, harassment, or other violations of any law, rule, or regulation, or the policies for our Service. To comply with legal obligations. This may include: compliance with legal or regulatory obligations, establishing or exercising our rights, and to defending against a legal claim; responding to law enforcement requests and as required by applicable law, court order, legal process, or governmental regulation.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes	To communicate with you. This may include: contacting you about and providing you and our clients with our Service; enabling our website chat function; responding to your direct inquiries, requests, issues or feedback, and providing customer service; and adding you to our mailing lists and sending you emails from time to time. To provide our products and services. This may include: operating the Service, and providing you with any specific services that you have requested; creating, maintaining, and otherwise managing your account, profile, or subscription; delivering content and product and service offerings relevant to your interests; fulfilling your orders and/or completing the transactions you have requested, processing your payments, and providing you receipts and order updates; to remind you of items you have left in your cart; and providing a forum for discussion, asking questions, posting photos and reviews, and sharing experiences. Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors. Providing personalized advertising and marketing services. For analytics and personalisation. For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing analytic services, providing storage, or providing similar services. To comply with legal obligations.This may include: compliance with legal or regulatory obligations, establishing or exercising our rights, and to defending against a legal claim; responding to law enforcement requests and as required by applicable law, court order, legal process, or governmental regulation.
“Sold” or “Shared” in the Prior Twelve (12) Months for the Following Purposes	Marketing and advertising. For analytics and personalisation
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information	Service providers who perform business services for us. Marketing and advertising partners.

Category of data: Commercial information
Examples	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Business or Commercial Purposes for Collecting Personal Information	To communicate with you. This may include: contacting you about and providing you and our clients with our Service; enabling our website chat function; responding to your direct inquiries, requests, issues or feedback, and providing customer service; and adding you to our mailing lists and sending you emails from time to time. To provide our products and services. This may include: operating the Service, and providing you with any specific services that you have requested; creating, maintaining, and otherwise managing your account, profile, or subscription; delivering content and product and service offerings relevant to your interests; fulfilling your orders and/or completing the transactions you have requested, processing your payments, and providing you receipts and order updates; to remind you of items you have left in your cart; and providing a forum for discussion, asking questions, posting photos and reviews, and sharing experiences. Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors Providing personalized advertising and marketing services. For analytics and personalisation. For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing analytic services, providing storage, or providing similar services. For security and fraud prevention. This may include: helping maintain the safety, security, and integrity of our Service, databases and other technology assets, and business; internal research; technological development and demonstration; and improving, upgrading, or enhancing our Service; detecting security incidents; protecting against malicious, deceptive, fraudulent, or illegal activity; and prosecuting those responsible for that activity; and investigating suspected fraud, harassment, or other violations of any law, rule, or regulation, or the policies for our Service. To comply with legal obligations. This may include: compliance with legal or regulatory obligations, establishing or exercising our rights, and to defending against a legal claim; responding to law enforcement requests and as required by applicable law, court order, legal process, or governmental regulation.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes	To communicate with you. This may include: contacting you about and providing you and our clients with our Service; enabling our website chat function; responding to your direct inquiries, requests, issues or feedback, and providing customer service; and adding you to our mailing lists and sending you emails from time to time. To provide our products and services. This may include: operating the Service, and providing you with any specific services that you have requested; creating, maintaining, and otherwise managing your account, profile, or subscription; delivering content and product and service offerings relevant to your interests; fulfilling your orders and/or completing the transactions you have requested, processing your payments, and providing you receipts and order updates; to remind you of items you have left in your cart; and providing a forum for discussion, asking questions, posting photos and reviews, and sharing experiences. Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors. Providing personalized advertising and marketing services. For analytics and personalisation For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing analytic services, providing storage, or providing similar services. To comply with legal obligations. This may include: compliance with legal or regulatory obligations, establishing or exercising our rights, and to defending against a legal claim; responding to law enforcement requests and as required by applicable law, court order, legal process, or governmental regulation.
“Sold” or “Shared” in the Prior Twelve (12) Months for the Following Purposes	Marketing and advertising partners For analytics and personalisation
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information	Marketing and advertising partners. Service providers who perform business for us.

Category of data: Internet or other similar network activity.
Examples	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.
Business or Commercial Purposes for Collecting Personal Information	Providing personalized advertising and marketing services. For analytics and personalisation For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing analytic services, providing storage, or providing similar services.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes	Providing personalized advertising and marketing services. For analytics and personalisation For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing analytic services, providing storage, or providing similar services.
“Sold” or “Shared” in the Prior Twelve (12) Months for the Following Purposes	Marketing and advertising partners. For analytics and personalisation
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information	Marketing and advertising partners. Service providers who perform business for us.

Category of data- geolocation data.
Examples	Information sufficient to identify the name of a city or town.
Business or Commercial Purposes for Collecting Personal Information	Providing personalized advertising and marketing services. For analytics and personalisation For security and fraud prevention. This may include: helping maintain the safety, security, and integrity of our Service, databases and other technology assets, and business; internal research; technological development and demonstration; and improving, upgrading, or enhancing our Service; detecting security incidents; protecting against malicious, deceptive, fraudulent, or illegal activity; and prosecuting those responsible for that activity; and investigating suspected fraud, harassment, or other violations of any law, rule, or regulation, or the policies for our Service. To comply with legal obligations. This may include: compliance with legal or regulatory obligations, establishing or exercising our rights, and to defending against a legal claim; responding to law enforcement requests and as required by applicable law, court order, legal process, or governmental regulation.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes	Providing personalized advertising and marketing services. For analytics and personalisation
“Sold” or “Shared” in the Prior Twelve (12) Months for the Following Purposes	Service providers who perform business for us. For analytics and personalisation
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information	Marketing and advertising partners. Service providers who perform business for us.

Category of data- Inferences drawn from other personal information for profiling purposes.
Examples	Used to create a profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
Business or Commercial Purposes for Collecting Personal Information	Providing personalized advertising and marketing services.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes	Providing personalized advertising and marketing services. For analytics and personalisation
“Sold” or “Shared” in the Prior Twelve (12) Months for the Following Purposes	Service providers who perform business for us.
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information	Marketing and advertising partners. Service providers who perform business for us.